Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
File:                     2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json)
Hash identifier:          urAFqmQzwfpMFqjGAv3SWdNDJ2Gae71v/SLg6lTyLiU=
Subject key identifier:   D4:B0:EC:AB:35:66:0A:5D:92:CE:68:32:25:55:F1:53:62:29:54:DB
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Certificate issuer:       /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial:       0199FB0ED659C17A0499DA14C3F403CE22DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
Manifest number:          1700
Signing time:             Sun 19 Oct 2025 06:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:17 +0000
Files and hashes:         1: 1F-PLkJeZsd5BhbWomZg7cLPFrk.roa (hash: yrygGJcoXqVH2Jg8Juj5GnPuSpfNJREHSoSijlooIac=)
                          2: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: kckxQD/SRfIVwSuCkqfXdrvdX6zEsdadFQr94vyVyCw=)
                          3: 28-uwfDVLpaahAp5_g4gOqonJRE.roa (hash: ZiFvqyNcFNQjj1MRiXrgYLhWSDf2EOuub9eyPgFwZ5w=)
                          4: 3PFyhkeygxSnr9lo2JsKv8zzptA.roa (hash: q1R0erCPFvF5C0+eg74kijSUxdckHy4082+SsXMgLoI=)
                          5: 5gCvrLecynoNlZqqecgbQQFoRrQ.roa (hash: 9K+m38Q0PxPs98dlo8mOUJqX2gTHhK0yh4taoKPklF4=)
                          6: Hgi1HuyOIm-pDNTXBi7SDeMMv54.roa (hash: 4I6w4WrI+TeCpJfBFE/CPemODRHx6exn+BxP4Gc/fZ4=)
                          7: VTFmKW5oJe_aki7x1urblkP0Fyc.roa (hash: 2MZuFdP6pQLocFIUqAzsdUT8olNA1CbFEwyUxslWUHU=)
                          8: WuMjl-VoG-q9mOfKlozyoU3i5Zc.roa (hash: gMQYLpr2E7Od3N3zIX37zoUdKHUCId0XHkWxbn/9Hs4=)
                          9: Y-ggvECpJ-TUj9BMaNxFVHCG_mk.roa (hash: yHJbvycQTABXHTmwKw5e8PRSEFVUISxjCDtnqSPXNps=)
                          10: czt3GQhHtSmOo6RJuvFMFQAKSGo.roa (hash: XJWzfiETobcimR26X1Pa8klzjoq9ZGkjfUnqI+42fs0=)
                          11: eL6yX2gKmuR54LoAuIUZEONKX3g.roa (hash: Wq/KgDr2vwlpid8VQStYJgjmPQjXNNh76BSl9DIrTcE=)
                          12: hBf-hoIhETw06OBRpv7F1WdTrE8.roa (hash: LSEM+beBKj2xu4gyMsUhzku59BFOyI6BOdyKq1jM8vA=)
                          13: ps-3dIi4E3kjzYMhNLY6gSZjzEI.roa (hash: AimvrgTPnFzv1TtjV/eH/9wijMpIF0IeujrL4F6J9qw=)
                          14: vWlItCBxAXeKE8gJX96SzwOKVyc.roa (hash: Y2Q+VHBMvY4aKyxjSWnm9nXu79hw6C2astvb5J8gRi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:d6:59:c1:7a:04:99:da:14:c3:f4:03:ce:22:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
        Validity
            Not Before: Oct 19 06:01:17 2025 GMT
            Not After : Oct 20 06:01:17 2025 GMT
        Subject: CN=d4b0ecab35660a5d92ce68322555f153622954db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1a:0a:50:46:f2:69:e5:e3:82:57:8a:d6:ce:
                    51:e0:9e:65:df:5d:82:29:a0:f9:68:95:d2:54:f3:
                    37:fa:c2:05:97:2b:f5:9d:23:3d:a6:66:35:50:1d:
                    43:89:ac:5b:17:3a:25:b6:1a:63:af:8a:43:c2:66:
                    c6:1b:d7:18:11:34:1c:3d:b3:74:93:07:66:8a:07:
                    54:ef:2c:1e:c0:a1:54:eb:fd:0e:c2:c4:93:0b:ca:
                    d3:92:e7:04:d6:23:47:e5:09:1d:8f:fe:18:ca:85:
                    13:8d:56:cb:28:0f:ad:e1:bd:fa:30:ad:68:26:a3:
                    14:79:22:a3:8d:e6:80:c5:ed:8c:9f:5b:66:0d:79:
                    fd:6e:04:c5:23:6a:b7:3b:69:fa:e1:84:2f:8e:77:
                    59:5c:77:91:b1:f1:61:d8:71:55:1a:91:7c:2a:c1:
                    e6:82:72:d8:0b:f1:6b:71:93:a8:65:8f:74:4a:19:
                    66:d0:7a:e0:cc:62:92:9d:06:7a:16:4b:88:c4:88:
                    a5:50:40:06:1e:d1:59:32:55:58:fe:07:59:92:5b:
                    dc:59:c1:76:20:ab:ed:52:05:e4:7f:b2:ad:38:7b:
                    33:30:5c:aa:36:1b:56:54:1e:13:11:3e:c8:8f:fe:
                    57:81:cc:9b:1c:27:fe:95:5c:61:d8:53:40:4b:6b:
                    5e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B0:EC:AB:35:66:0A:5D:92:CE:68:32:25:55:F1:53:62:29:54:DB
            X509v3 Authority Key Identifier:
                keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e0:d5:aa:12:b1:80:82:3d:ff:9d:70:04:59:9f:ef:d8:9e:
         5a:30:61:dd:23:67:a0:90:9b:5c:40:68:d8:a9:72:11:89:b2:
         4c:6d:f8:84:f3:6e:69:77:2d:2b:2b:8b:c4:58:d4:37:f4:d2:
         76:db:4f:f8:c5:7d:87:b8:e0:58:98:46:c1:3e:08:59:52:c4:
         51:66:9f:5a:00:d0:ba:24:18:d8:11:ab:df:bd:da:e2:fb:fe:
         06:5f:4d:ee:f5:2c:38:18:36:74:79:00:7b:02:56:1a:9c:61:
         e0:34:c9:f3:3d:ba:27:af:48:41:fb:27:f9:63:58:1c:2a:fe:
         29:47:d2:90:33:1e:82:19:7a:c3:da:cf:74:71:04:18:c7:73:
         45:27:a3:be:3c:76:ef:cb:e6:6f:1a:5d:41:b4:37:b2:5a:b1:
         bc:54:08:77:cb:0d:ac:b4:e0:44:fd:79:12:6e:c2:ae:fd:7c:
         f4:d7:53:32:30:09:d2:78:81:b1:aa:58:06:e7:15:04:47:38:
         c4:4e:87:db:90:7a:93:66:d9:3b:08:b3:24:46:d7:37:f7:d1:
         e7:f6:86:2a:22:56:7f:5b:ea:94:1f:8c:4a:dc:3d:87:5d:f8:
         86:8f:3e:43:f5:4f:b3:a5:cf:77:81:9f:2c:22:f7:a0:c2:13:
         cf:97:e5:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DtZZwXoEmdoUw/QDziLcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2
MjFkYjEwHhcNMjUxMDE5MDYwMTE3WhcNMjUxMDIwMDYwMTE3WjAzMTEwLwYDVQQD
EyhkNGIwZWNhYjM1NjYwYTVkOTJjZTY4MzIyNTU1ZjE1MzYyMjk1NGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hoKUEbyaeXjgleK1s5R4J5l312C
KaD5aJXSVPM3+sIFlyv1nSM9pmY1UB1DiaxbFzolthpjr4pDwmbGG9cYETQcPbN0
kwdmigdU7ywewKFU6/0OwsSTC8rTkucE1iNH5Qkdj/4YyoUTjVbLKA+t4b36MK1o
JqMUeSKjjeaAxe2Mn1tmDXn9bgTFI2q3O2n64YQvjndZXHeRsfFh2HFVGpF8KsHm
gnLYC/FrcZOoZY90Shlm0HrgzGKSnQZ6FkuIxIilUEAGHtFZMlVY/gdZklvcWcF2
IKvtUgXkf7KtOHszMFyqNhtWVB4TET7Ij/5XgcybHCf+lVxh2FNAS2tedwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSw7Ks1Zgpdks5oMiVV8VNiKVTbMB8GA1UdIwQY
MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt
ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3
LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANeDVqhKx
gII9/51wBFmf79ieWjBh3SNnoJCbXEBo2KlyEYmyTG34hPNuaXctKyuLxFjUN/TS
dttP+MV9h7jgWJhGwT4IWVLEUWafWgDQuiQY2BGr373a4vv+Bl9N7vUsOBg2dHkA
ewJWGpxh4DTJ8z26J69IQfsn+WNYHCr+KUfSkDMeghl6w9rPdHEEGMdzRSejvjx2
78vmbxpdQbQ3slqxvFQId8sNrLTgRP15Em7Crv189NdTMjAJ0niBsapYBucVBEc4
xE6H25B6k2bZOwizJEbXN/fR5/aGKiJWf1vqlB+MStw9h134ho8+Q/VPs6XPd4Gf
LCL3oMITz5flYQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:53 2025 by rpki-client